
$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
File:                     wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft (raw, json)
Hash identifier:          dmCIY+pe+MeOueZwx9gbZqk7v9teNlrItJ2yD8r9cB4=
Subject key identifier:   7D:DE:97:18:2E:42:15:D5:7E:70:77:1A:6D:1C:AF:87:8D:BA:71:2A
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       3518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
Manifest number:          34EF
Signing time:             Sun 02 Nov 2025 14:25:09 +0000
Manifest this update:     Sun 02 Nov 2025 14:25:08 +0000
Manifest next update:     Sun 09 Nov 2025 14:25:08 +0000
Files and hashes:         1: wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl (hash: HNN+k7eQQxYd5TrvSsfE3RPnO3HJdHDKAKrxvynVzr0=)
                          2: 3AA9ABDAA6C711E9933CF621C4F9AE02.roa (hash: 0Vd+S2y27VtxJNaIaSzS26hUg229nb/6aZufw7SyqnQ=)
                          3: 3A0818A6A6C711E9933CF621C4F9AE02.roa (hash: utwoHGpdCAj4Fmr//A9NQPq/Muvduh7CzdYTs9q3Yzo=)
                          4: 39651CE6A6C711E9933CF621C4F9AE02.roa (hash: 0S/ooPJ2C5kXa2YUe26MqZS0wv4CYq55uodN29fbqkM=)
                          5: 387D8CB4A6C711E9933CF621C4F9AE02.roa (hash: EegTeeLlTfEQvKcm3aqYDfh/vKoTkWLQIcSy6ptPChU=)
                          6: 45598DB8FA1611EA9C6CE978C4F9AE02.roa (hash: EtRSxXLr9JBTJCnUooXoQwRCFg8CAJ0u6Dp1S7zs3Tg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 14:25:08 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13592 (0x3518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Nov  2 14:25:08 2025 GMT
            Not After : Nov  9 14:25:08 2025 GMT
        Subject: CN=690769c4-d668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:f8:a5:31:a5:de:e1:ec:5c:98:ba:c2:6c:
                    b9:4e:32:ee:b6:8c:14:bc:d7:f8:00:e0:b2:5f:85:
                    75:a1:87:7f:cd:81:8e:91:6a:bb:c8:8a:f4:bc:ba:
                    0e:33:7c:2d:87:de:87:9f:0a:b9:dd:fc:e5:16:a9:
                    76:cc:f4:ca:d4:25:2f:6a:5f:5b:c4:77:ae:11:44:
                    43:4d:67:46:3d:f2:0c:b5:6a:2d:04:ea:cd:87:77:
                    e2:69:cf:77:56:df:f3:3d:54:3c:5b:f8:f7:02:12:
                    4e:bf:56:e6:09:73:1e:c7:45:0b:71:da:2e:a4:87:
                    f9:19:93:1d:96:b9:1f:c4:d2:07:23:5a:b1:9f:e5:
                    f5:24:a9:cb:b1:9a:ce:63:ab:32:f6:39:50:ac:c2:
                    8d:33:5e:a9:65:77:e0:77:71:f5:46:e3:fe:eb:c1:
                    1e:6b:b6:7d:cf:60:3c:8b:f7:b3:69:f2:fd:a5:8e:
                    0b:75:0e:dd:24:8b:9f:ae:a1:9b:fb:ca:6c:01:1b:
                    52:f1:88:b6:db:0a:50:27:a2:ae:2e:29:41:9e:d3:
                    36:bf:df:0a:c3:d6:ea:c6:63:45:f2:62:fe:5e:ae:
                    93:89:8c:ad:e6:d9:56:3c:4b:7e:80:86:aa:8b:55:
                    ce:54:12:20:a3:7b:d0:6f:2f:c0:a8:e0:97:3a:33:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:97:18:2E:42:15:D5:7E:70:77:1A:6D:1C:AF:87:8D:BA:71:2A
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         08:a1:3b:90:3f:c0:f6:78:e8:9f:cb:c7:bf:7a:77:a3:2d:cf:
         52:f6:4e:09:32:6e:24:e4:ad:67:75:bd:b1:dd:17:26:eb:4b:
         cd:6f:83:a2:ea:1e:ff:7c:18:9a:ba:f6:08:9a:5a:68:10:cb:
         ea:0b:31:b9:2f:c1:d2:e4:bc:e3:33:ce:07:b7:37:da:b8:8e:
         b6:b5:83:8d:77:25:15:23:28:e2:14:d0:c9:88:6f:89:10:1f:
         a0:7f:98:19:cf:bc:23:44:d3:41:23:a7:0b:80:c3:9b:06:2e:
         4f:99:b4:1b:7d:8f:fd:56:01:c2:cd:6d:c4:bc:d2:f9:6f:d3:
         4d:69:37:ac:35:d9:3d:b8:62:2b:e9:7b:e6:70:d0:2c:06:29:
         31:af:fe:52:65:ac:84:14:21:62:8a:e6:5c:1d:b4:5f:b9:ea:
         a8:1f:90:12:3d:bb:73:73:52:a7:32:35:06:b0:bf:ad:6a:96:
         00:c9:0e:b1:71:3d:28:24:8e:8b:e6:ba:7a:06:6b:4b:b1:86:
         d0:e1:e6:35:3e:0e:a0:35:24:aa:59:c1:86:5a:17:fd:9d:fb:
         4f:81:f6:1e:6c:7a:ce:88:e1:b0:96:0d:6d:cd:e5:0d:a6:b3:
         3e:9e:b1:3a:89:b0:f5:0a:72:09:27:ef:51:bf:f5:c3:5b:71:
         72:2a:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:29:05 2025 by rpki-client